First reported daily.dev
Research · latest
First reported akamai.com
Top 5 Enterprise AI Risks 2026 Research
Akamai's State of the Internet: Enterprise AI Usage Risk Report 2026 (drawing on LayerX telemetry) finds that the top 5% of enterprise AI power users interact with AI models at 12 times the rate of the bottom 50%, hardcoding unvetted AI tools into critical operations. The report enumerates the top five enterprise AI risks, including shadow AI from personal accounts, data leakage, unnoticed browser/IDE extensions, and AI agents operating outside guardrails, citing named attack techniques such as CursorJacking and CometJacking. Details →First reported beyondtrust.com
How Copilot Studio Sandbox Escape Gave Us Admin Access
BeyondTrust's Phantom Labs details how they escaped Microsoft Copilot Studio's Code Interpreter sandbox, chaining modern prompt injection techniques with classic dictionary attacks to obtain Administrator credentials to code interpreter sandboxes deployed worldwide. The research, starting from a stock agent with only the code-interpreter toggle enabled, argues that many AI agent sandboxes act as guardrails rather than true security boundaries. Details →First reported tech-insider.org
AI-Generated Code Security Stalls at 56% Pass Rate [2026] – Tech Insider Ireland
Coverage of Veracode's 2026 GenAI Code Security Report finds that across more than 100 tracked large language models the average security pass rate for generated code sits at 56%, meaning roughly 44% of AI code-generation tasks introduce a known, exploitable vulnerability when no explicit security instruction is given. The report notes AI now writes close to half of all committed code, and the pass rate has barely moved from 55% in the prior snapshot. Details →First reported nhimg.org
AI agent attacks are bypassing legacy controls and leaving no trace
Straiker's STAR Labs research report, summarized by NHIMG, describes more than 1,700 successful adversarial scenarios against coding, productivity, and first-party AI agents (including Cursor, Claude Code, and GitHub Copilot). It found 36% of successful coding-agent attacks reached remote code execution on developer machines, 91% of successful productivity-agent attacks ended in silent data exfiltration, and 24% of 17,651+ tracked Model Context Protocol servers carry at least one vulnerability. Details →First reported scworld.com
Agentic anarchy: Why using AI browsers just isn't worth the risk | news | SC Media
At Black Hat 2026, Zenity researchers Michael Bargury and Stav Cohen demonstrated prompt-injection ('persuasion') attacks against AI browsers including Perplexity Comet, Microsoft Edge with Copilot, Chrome with Gemini, the Anthropic Claude extension, and OpenAI's Atlas. Injections embedded in calendar invites, emails, and social posts led agents to take over a PC in seconds, steal 1Password credentials and recovery keys, send phishing email, exfiltrate files, delete AWS instances, and expose private GitHub repos; Perplexity has since fixed the local-file flaw. Details →First reported arxiv.org
Impossible to hide secret ...: Uncovering Security and Privacy Issues in LLM-native IDEs
Researchers from York University and the University of Calgary analyzed 1.1 million Reddit posts (446 relevant posts, 6,000+ comments) to build a taxonomy of security and privacy issues in LLM-native IDEs (LIDEs) such as Cursor, GitHub Copilot, Claude Code, and OpenAI Codex. Their preprint finds that most issues stem from system-level design choices rather than the underlying models, including unauthorized file operations (43.1%), destructive actions like Claude Code running chmod without consent and Replit deleting a production database, operational safety failures, opaque data flows, and leakage of sensitive information via expanded context access. Details →First reported aicybermagazine.com
Plan, Wait, Harvest: Zero-Click Data Exfiltration In Agentic AI.
An article by Venkata Sai Kishore Modalavalasa demonstrates a reproducible zero-click data-exfiltration attack against multi-agent AI systems, where an attacker uploads a single poisoned document into the data plane and later a routine admin-triggered compliance review causes agents to silently email sensitive vendor data (banking details, risk assessments, internal notes) to an external address. The attack exploits trust relationships between agents and the lack of boundaries between data and instructions rather than any code-level CVE, and is walked through hands-on in a purpose-built lab environment. Details →First reported datadoghq.com
Before the first prompt: Code execution paths in trusted coding-agent projects | Datadog Security Labs
Datadog Security Labs demonstrates that trusting a repository in coding agents such as OpenAI Codex and Claude Code can trigger repository-controlled code execution before the first prompt, without a model response or shell-command approval. In Codex, project-scoped MCP configurations start an attacker-controlled process, and in Claude Code a project-controlled PATH causes Claude's automatic Git probes to run a tracked repository wrapper — bypassing hook-approval controls. Details →First reported arxiv.org
Security Vulnerability Patterns in AI-Generated Code: A Cross-Model Comparative Study
A cross-model comparative study by Kahn and Hastings generated nine Python automation scripts using identical prompts across ChatGPT, Microsoft Copilot, and Google Gemini, then used Claude Code to perform a standardized vulnerability review scored with CVSS v3.1 and mapped to OWASP Top 10 and MITRE ATT&CK. Every script contained exploitable vulnerabilities, with nine of 17 vulnerability classes appearing across all three models and weighted CVSS scores differing by less than 10%, indicating risk is tied to task category rather than a specific model. Details →First reported snyk.io
What nearly 10,000 developer environments reveal about agentic development risk
Snyk analyzed nearly 10,000 developer environments to examine risks introduced by AI coding agents as a new layer in the software supply chain, highlighting issues around tools, instructions, and permissions in agentic development. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector